static File googleClientSecretFileForDomain(S domain) {
  if (!isSimpleDomainName(domain)) null;
  ret firstThat(listFiles(javaxSecretDir(domain)),
    f -> startsWith(fileName(f), "client_secret") && endsWith(fileName(f), ".json"));
}